registry  /  @astrasyncai/verification-gateway  /  3.5.0

@astrasyncai/verification-gateway@3.5.0

AstraSync KYA Platform SDK — counterparty verification gateway (verify incoming requests) + agent registration (register AI agents with the KYA backend).

AI Security Review

scanned 13h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an AstraSync verification/registration SDK with explicit CLI, middleware, Cursor adapter, and git-hook guard features.

Static reason
No blocking static signals were detected.
Trigger
Importing SDK modules, running the astrasync CLI, initializing Cursor adapter, or explicitly calling git hook helpers.
Impact
User-invoked registration/verification, header injection, local policy evaluation, optional managed git hooks; no unconsented install-time mutation or exfiltration confirmed.
Mechanism
Verification/registration API client and optional local policy guard integrations.
Rationale
Source inspection shows risky primitives are tied to documented SDK/CLI guard behavior and package-aligned network calls, with no npm install-time execution or concrete malicious chain. Optional Cursor and git-hook controls are user-invoked/extension-initialized guard features, not stealth persistence or broad AI-agent hijack.
Evidence
package.jsondist/bin/astrasync.jsdist/index.jsdist/agent/index.jsdist/registration/index.jsdist/cursor/cursor-adapter.jsdist/git-trigger/git-hooks.jsdist/cli/index.jsdist/gateway/gateway.jsdist/transport/index.js.git/hooks/pre-push.git/hooks/pre-commit.astrasync/traces/
Network endpoints4
astrasync.aiastrasync.ai/apiapi.astrasync.aimcp.visa.com/.well-known/jwks

Decision evidence

public snapshot
AI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for block
  • dist/git-trigger/git-hooks.js can write/remove managed .git hooks when installGitHooks/uninstallGitHooks are explicitly called.
  • dist/cursor/cursor-adapter.js registers Cursor/VS Code file event listeners when initialized by an extension host.
  • dist/registration/index.js reads ASTRASYNC_API_KEY/ASTRASYNC_API_URL unless disableEnvFallback is set.
Evidence against
  • package.json has no preinstall/install/postinstall; only prepublishOnly build lifecycle.
  • dist/bin/astrasync.js only runs when the astrasync bin is invoked and performs register/verify/health API calls.
  • Network calls are package-aligned verification, registration, auth, policy upload, ownership, or documented payment/JWKS endpoints.
  • No credential harvesting, broad filesystem scanning exfiltration, remote payload loading, eval, or install-time AI-agent control mutation found.
  • Git hook writes are explicit exported/user-command functionality and avoid overwriting non-AstraSync hooks.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 41 file(s), 2.22 MB of source, external domains: api.astrasync.ai, astrasync.ai, mcp.visa.com, placeholder.invalid, staging.astrasync.ai

Source & flagged code

3 flagged · loading source
dist/git-trigger/git-hooks.jsView file
•Published source reference
Low
Ai Review Evidence

dist/git-trigger/git-hooks.js can write/remove managed .git hooks when installGitHooks/uninstallGitHooks are explicitly called.

dist/git-trigger/git-hooks.jsView on unpkg
dist/cursor/cursor-adapter.jsView file
•Published source reference
Low
Ai Review Evidence

dist/cursor/cursor-adapter.js registers Cursor/VS Code file event listeners when initialized by an extension host.

dist/cursor/cursor-adapter.jsView on unpkg
dist/registration/index.jsView file
•Published source reference
Low
Ai Review Evidence

dist/registration/index.js reads ASTRASYNC_API_KEY/ASTRASYNC_API_URL unless disableEnvFallback is set.

dist/registration/index.jsView on unpkg

Findings

2 Medium8 Low
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencedist/git-trigger/git-hooks.js
LowAi Review Evidencedist/cursor/cursor-adapter.js
LowAi Review Evidencedist/registration/index.js